chati-dev 4.5.7 → 4.5.8

package/framework/agents/build/dev.md

@@ -13,7 +13,7 @@ You are the **Dev Agent**, responsible for implementing code based on the approv
 - **Duration**: Varies per task
 - **Ratio**: 20% Human / 80% AI (interactive) or 5% Human / 95% AI (autonomous)
 - **Absorbs**: Dev personas, self-validation patterns, Design System token enforcement, Ralph Wiggum autonomous mode, blocker taxonomy
-- **Model**: opus | no downgrade (code generation requires highest quality)
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default) | gemini (when large codebase tasks)
 
 ## Required MCPs

package/framework/agents/deploy/devops.md

@@ -12,7 +12,7 @@ You are the **DevOps Agent**, responsible for shipping the project: Git operatio
 - **Question Answered**: SHIP it
 - **Duration**: 15-30 min
 - **Ratio**: 30% Human / 70% AI
-- **Model**: sonnet | upgrade: opus if multi-environment or infrastructure-as-code
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default)
 - **Absorbs**: Docs-gen (auto documentation generation)
 

package/framework/agents/discover/brief.md

@@ -12,7 +12,7 @@ You are the **Brief Agent**, responsible for extracting and structuring the core
 - **Question Answered**: WHAT is the problem?
 - **Duration**: 30-60 min
 - **Ratio**: 90% Human / 10% AI
-- **Model**: sonnet | upgrade: opus if enterprise or 10+ integrations
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default)
 
 ## Required MCPs

package/framework/agents/discover/brownfield-wu.md

@@ -12,7 +12,7 @@ You are the **Brownfield WU Agent**, responsible for comprehensive discovery of
 - **Question Answered**: HOW does it work today? (both code and operations)
 - **Duration**: 1-4h depending on codebase size
 - **Ratio**: 40% Human / 60% AI
-- **Model**: opus | no downgrade (codebase analysis requires deep reasoning)
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default) | gemini (when codebase > 100K LOC)
 
 ## Required MCPs

package/framework/agents/discover/greenfield-wu.md

@@ -12,7 +12,7 @@ You are the **Greenfield WU Agent**, responsible for understanding HOW the user
 - **Question Answered**: HOW does it work today?
 - **Duration**: 15-30 min
 - **Ratio**: 70% Human / 30% AI
-- **Model**: haiku | upgrade: sonnet if multi-stack or enterprise
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default)
 
 ## Required MCPs

package/framework/agents/plan/architect-data-engineer.md

@@ -9,7 +9,7 @@ You are the **Data Engineer**, a specialist sub-agent of the Architect Manager.
 - **Role**: Database Architecture & Data Operations Specialist
 - **Parent**: Architect Manager
 - **Step**: 4 (Data Architecture - expanded from original Architect)
-- **Model**: opus | no downgrade (schema design requires deep reasoning about relationships and constraints)
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 
 ---
 

package/framework/agents/plan/architect-system.md

@@ -9,7 +9,7 @@ You are the **System Architect**, a specialist sub-agent of the Architect Manage
 - **Role**: System Architecture & API Design Specialist
 - **Parent**: Architect Manager
 - **Steps**: 1-3 (Tech Stack, System Design, API + Auth + Deploy + Security)
-- **Model**: opus | no downgrade (architecture requires deep reasoning)
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 
 ---
 

package/framework/agents/plan/architect.md

@@ -12,7 +12,7 @@ You are the **Architect Manager**, the coordinator for the technical design pipe
 - **Question Answered**: HOW will we build it?
 - **Duration**: 45-90 min (coordinates 2 sub-agents sequentially)
 - **Ratio**: 50% Human / 50% AI
-- **Model**: opus | no downgrade
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default)
 
 ## Required MCPs

package/framework/agents/plan/detail.md

@@ -13,7 +13,7 @@ You are the **Detail Agent**, responsible for transforming the Brief into a form
 - **Duration**: 45-90 min
 - **Ratio**: 70% Human / 30% AI
 - **Absorbs**: PM (PRD creation, product strategy), Analyst (market research, competitive analysis)
-- **Model**: opus | no downgrade (PRD traceability requires deep reasoning)
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default)
 
 ## Required MCPs

package/framework/agents/plan/phases.md

@@ -13,7 +13,7 @@ You are the **Phases Agent**, responsible for breaking the PRD into development
 - **Duration**: 20-40 min
 - **Ratio**: 60% Human / 40% AI
 - **Absorbs**: SM (phase planning, prioritization, wave sequencing)
-- **Model**: sonnet | upgrade: opus if 20+ requirements or complex dependencies
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default)
 
 ## Required MCPs

package/framework/agents/plan/tasks.md

@@ -13,7 +13,7 @@ You are the **Tasks Agent**, responsible for breaking phases into atomic, execut
 - **Duration**: 30-60 min
 - **Ratio**: 50% Human / 50% AI
 - **Absorbs**: SM (structured task creation, Given-When-Then criteria)
-- **Model**: sonnet | upgrade: opus if 50+ tasks or complex acceptance criteria
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default)
 
 ## Required MCPs

package/framework/agents/plan/ux-brand-architect.md

@@ -9,7 +9,7 @@ You are the **Brand & Design System Architect**, a specialist sub-agent of the U
 - **Role**: Brand Identity & Design System Specialist
 - **Parent**: UX Manager
 - **Phases**: 0 (Brand Identity) + 4 (Design System Definition)
-- **Model**: sonnet | upgrade: opus if design system creation from scratch
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 
 ---
 

package/framework/agents/plan/ux-component-engineer.md

@@ -9,7 +9,7 @@ You are the **Component Engineer**, a specialist sub-agent of the UX Manager. Yo
 - **Role**: Component Architecture & Accessibility Specialist
 - **Parent**: UX Manager
 - **Phases**: 3 (Interaction Patterns + Accessibility + Motion + Component Discovery)
-- **Model**: sonnet | upgrade: opus if complex component architecture
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 
 ---
 

package/framework/agents/plan/ux-researcher.md

@@ -9,7 +9,7 @@ You are the **UX Researcher**, a specialist sub-agent of the UX Manager. You own
 - **Role**: User Experience Research & Information Architecture Specialist
 - **Parent**: UX Manager
 - **Phases**: 1 (User Flow Mapping) + 2 (Information Architecture)
-- **Model**: sonnet
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 
 ---
 

package/framework/agents/plan/ux.md

@@ -12,7 +12,7 @@ You are the **UX Manager**, the coordinator for the design experience pipeline.
 - **Question Answered**: HOW will it look/feel?
 - **Duration**: 60-120 min (coordinates 3 sub-agents sequentially)
 - **Ratio**: 30% Human / 70% AI (user validates direction, sub-agents execute)
-- **Model**: sonnet | upgrade: opus if design system creation from scratch
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default)
 
 ## Required MCPs

package/framework/agents/quality/qa-implementation.md

@@ -12,7 +12,7 @@ You are the **QA-Implementation Agent**, the quality gate between BUILD and DEPL
 - **Question Answered**: DOES it work correctly?
 - **Duration**: 15-45 min (mostly automated)
 - **Ratio**: 90% AI / 10% Human
-- **Model**: opus | no downgrade (code review and SAST require deep reasoning)
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default)
 - **Absorbs**: Tests + SAST + CodeRabbit code review
 

package/framework/agents/quality/qa-planning.md

@@ -12,7 +12,7 @@ You are the **QA-Planning Agent**, the quality gate between PLANNING (planning)
 - **Question Answered**: IS everything traceable and rigorous?
 - **Duration**: 15-30 min (automated validation)
 - **Ratio**: 95% AI / 5% Human
-- **Model**: opus | no downgrade (cross-artifact validation requires deep reasoning)
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default)
 - **Absorbs**: Manager (cross-artifact validation), PO (quality gate validation, coherence checks)
 

package/framework/agents/quality/qa-visual.md

@@ -19,7 +19,7 @@ You are the **QA-Visual Agent**, a specialized quality gate focused exclusively
 - **Question Answered**: DOES it look right?
 - **Duration**: 5-15 min (mostly automated via visual-qa.js)
 - **Ratio**: 80% AI / 20% Human
-- **Model**: opus | no downgrade (screenshot analysis requires multimodal reasoning)
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Provider**: claude (default)
 - **Absorbs**: Phase 5d + Phase 5e from QA-Implementation (visual review and motion quality)
 

package/framework/agents/shared/visualizer.md

@@ -13,7 +13,7 @@ You are the **Visualizer**, a specialized sub-agent that reads sequential screen
 ## Identity
 
 - **Role**: Visual Frame Analyst (sub-agent, never runs standalone)
-- **Model**: sonnet (cost-efficient multimodal — image reading, not deep reasoning)
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 - **Spawned by**: Brief (reference analysis) or QA-Visual (build validation)
 - **Output**: Text-only analysis returned to the parent agent
 

package/framework/config.yaml

@@ -1,8 +1,8 @@
 # chati.dev Configuration
-version: "4.5.7"
+version: "4.5.8"
 installed_at: "2026-02-07T10:00:00Z"
 updated_at: "2026-08-27T00:00:00Z"
-installer_version: "4.5.7"
+installer_version: "4.5.8"
 project_type: greenfield
 language: en
 ides: []

package/framework/context/root.md

@@ -1,7 +1,7 @@
 # Chati.dev System Context
 
 ## Framework
-- **Version**: 4.5.7
+- **Version**: 4.5.8
 - **Agents**: Specialized discovery and planning agents feeding provider-neutral RAIL execution and a sealed release lane
 - **Constitution**: 25 Articles + Preamble
 - **Quality**: 5 pipeline gates + 3-tier verdicts + Fault Vector Protocol (Article XXII)

package/framework/data/entity-registry.yaml

@@ -3,7 +3,7 @@
 # and by the Health Check for system integrity validation.
 
 metadata:
-  version: "4.5.7"
+  version: "4.5.8"
   last_updated: "2026-08-27T00:00:00Z"
   entity_count: 109
   checksum_algorithm: sha256

package/framework/hooks/license-guard.js

@@ -29,6 +29,19 @@ const CACHE_TTL_MS = 4 * 60 * 60 * 1000; // 4 hours
 const GLOBAL_DIR = join(homedir(), '.chati-dev');
 const LICENSE_PATH = join(GLOBAL_DIR, 'license.yaml');
 
+async function hasVerifiedOpenInstallation(projectDir = process.cwd()) {
+  const artifactPath = join(projectDir, '.chati', 'v2', 'installation.json');
+  const doctorPath = join(projectDir, '.chati.dev', '_cli', 'installer-v2', 'index.js');
+  if (!existsSync(artifactPath) || !existsSync(doctorPath)) return false;
+  try {
+    const artifact = JSON.parse(readFileSync(artifactPath, 'utf-8'));
+    const { doctorV2 } = await import(doctorPath);
+    return doctorV2(artifact).passed && artifact.installation?.profile === 'open';
+  } catch {
+    return false;
+  }
+}
+
 /**
  * Pure license validation function — provider-agnostic.
  * Returns a verdict object that hook wrappers can translate to their
@@ -38,6 +51,12 @@ const LICENSE_PATH = join(GLOBAL_DIR, 'license.yaml');
  * @returns {Promise<{valid: boolean, reason?: string, status?: string}>}
  */
 export async function checkLicense() {
+  // The public Open profile does not require a commercial license. Trust the
+  // profile only after the canonical v2 doctor validates the signed artifact.
+  if (await hasVerifiedOpenInstallation()) {
+    return { valid: true, status: 'NOT_REQUIRED', profile: 'open' };
+  }
+
   // Read global license file — REQUIRED for operation
   if (!existsSync(LICENSE_PATH)) {
     return { valid: false, reason: 'No license found. Run: npx chati-dev activate --key=YOUR-KEY\nGet a license at https://chati.dev/pricing', status: 'MISSING' };

package/framework/manifest.json

@@ -1,103 +1,103 @@
 {
-  "createdAt": "2026-08-27T10:57:24.520Z",
+  "createdAt": "2026-08-27T12:02:42.275Z",
   "files": {
     "agents/build/dev.md": {
-      "hash": "5c8da2eee3357bbe84a6c468c76fe60a0c77357575503c3797aa94128282c565",
-      "size": 64929,
+      "hash": "13c2b3855c1f815154a2f4020b99fd8ee71e701b41783f5f26696222720a1466",
+      "size": 64962,
       "type": "md"
     },
     "agents/deploy/devops.md": {
-      "hash": "556488072417f4ed5cb7a358ea40f1946283b93041236fcedb770fb404df8dd3",
-      "size": 17999,
+      "hash": "f751c5d95d690627c45d885d0a484c2019aacda4111cb9785b70ea1813e67f40",
+      "size": 18025,
       "type": "md"
     },
     "agents/discover/brief.md": {
-      "hash": "d429a0d1bfb94f5d12c264bef90f0c5752c2500e57bdbdd6020ff84412fc9ff3",
-      "size": 26154,
+      "hash": "f5980b1c622103879b8fec400ab4461ba9bbdc0b60f498ddcdcdc4c8504ee919",
+      "size": 26193,
       "type": "md"
     },
     "agents/discover/brownfield-wu.md": {
-      "hash": "9b0f4eca1194d2d8a7e92c34cfa9357c774750299a79d0afeda06d1fe8d57a3e",
-      "size": 18088,
+      "hash": "b89e20408bdb0c672d6799507b0f9679c76df7f87f183f27b325070174ac490f",
+      "size": 18120,
       "type": "md"
     },
     "agents/discover/greenfield-wu.md": {
-      "hash": "abbced7c06b617584241fb4e1926315a2f6dcb651a36f7598315dbc7b67a6c83",
-      "size": 17171,
+      "hash": "046d29a39c85faaae7f67e820f8755d08b84d18ce880041208b6d9432e00eac8",
+      "size": 17214,
       "type": "md"
     },
     "agents/plan/architect-data-engineer.md": {
-      "hash": "86df68c465d69443d01f4e01b1a897516a3216fc1ef0c79be1f8ecf867a0fa89",
+      "hash": "092e76bf23eda8634863f05e1557a29044ec7afbde4cce3b103db26363a2cbc5",
       "size": 10435,
       "type": "md"
     },
     "agents/plan/architect-system.md": {
-      "hash": "bc5a92d013cc56448d4ed59366622217fdf90c90d083a5ae698d28cdbac06a8e",
-      "size": 8753,
+      "hash": "e05732c0a944be2c4d52cb3cd394a521c10c7a5d04569abb9f5f9111a1db1ceb",
+      "size": 8790,
       "type": "md"
     },
     "agents/plan/architect.md": {
-      "hash": "94c5eeb672d172d39e4ca1e189cfbb772fae262631c17cd4c0d11227be4d0739",
-      "size": 13213,
+      "hash": "d3d39eb5ac360b4945187dd6ad6b00bb096c09de2cf99232e881b91a8ae1c04a",
+      "size": 13289,
       "type": "md"
     },
     "agents/plan/detail.md": {
-      "hash": "1f5ae252b10cbc4142ff3be835344567db139e4e03dc5ffedd9653ff6e4115cb",
-      "size": 19258,
+      "hash": "310903bd1e7edc79ccd30ee83ccdfdea1b18f745629f6e2892a001f777771f6a",
+      "size": 19291,
       "type": "md"
     },
     "agents/plan/phases.md": {
-      "hash": "123bc5a1e12ad67777a1fac7d1953e3f764f49638b1cbef38dce991316630e15",
-      "size": 15834,
+      "hash": "04f53642c0624da30cc74ec26298731480d016e959ed3538f40054ea5a95d8af",
+      "size": 15863,
       "type": "md"
     },
     "agents/plan/tasks.md": {
-      "hash": "16c8c649a2172ca741b69fb5d2495f913afae981d57af97cc0503eba05af915b",
-      "size": 28228,
+      "hash": "d6440ac7e7ecc9a24d89f39b1786e3cb218565a16b12ecba888e8899abe57b48",
+      "size": 28257,
       "type": "md"
     },
     "agents/plan/ux-brand-architect.md": {
-      "hash": "9f9b586caf065402f493a1dcbb69ac70c575f595dc07021c7f46cc7e51a5490b",
-      "size": 28368,
+      "hash": "7bb987949fb404115735c82085c906db7a6b7b1baa4e6672f442114fe6c554b7",
+      "size": 28402,
       "type": "md"
     },
     "agents/plan/ux-component-engineer.md": {
-      "hash": "7bc21a8b57a929420df4009895a841381c759a79174c18beeeb4c24a2a25dc7d",
-      "size": 19663,
+      "hash": "65c72804f9ee40f814493b0e4a3db6d9d12f8ce34f8a4425d46a4bd23d522aa2",
+      "size": 19702,
       "type": "md"
     },
     "agents/plan/ux-researcher.md": {
-      "hash": "1f489f01273296539c23965f5adfd87a994fb8e52d19308b73474486b3051095",
-      "size": 6484,
+      "hash": "230555bfa77ced7196cf082ccc3f6de2b531b81063082c8d5af61d81ef37c608",
+      "size": 6573,
       "type": "md"
     },
     "agents/plan/ux.md": {
-      "hash": "6cf80ed6d8f4694ed027402d648b1d7367a5b3f3e7c4bce54c86d1d109ad671f",
-      "size": 15218,
+      "hash": "1b4303659b12a4cc687a7b14da52c51d4f72ab16b892cd2c074a818c96cacbe1",
+      "size": 15252,
       "type": "md"
     },
     "agents/quality/qa-implementation.md": {
-      "hash": "e3ea4d10856db04f91ea49714dc1f93bc2acf504edc9d93902d2a030c778d790",
-      "size": 40336,
+      "hash": "33d48d86473bd23b137baefb62ccfb5ad3f5a3e515779e2a19acc54ebe1de62b",
+      "size": 40366,
       "type": "md"
     },
     "agents/quality/qa-planning.md": {
-      "hash": "70135407c6bf8196a37cf52413c6462c0703ebc1fa59e511491c6360caf1dfd7",
-      "size": 25774,
+      "hash": "82cf821a4a04b784788f3b53281e7aa49abd4e72a88d9fcd42f2cc5c5d9a0f6d",
+      "size": 25798,
       "type": "md"
     },
     "agents/quality/qa-visual.md": {
-      "hash": "1fd18ad99315b6400a404acb307b0d33b18743429f8facb915f6127f57cdf57d",
-      "size": 21496,
+      "hash": "c4b7ca7ec0378c6a51092adfcaf58f811796711f713b65ac12408529374a72e9",
+      "size": 21520,
       "type": "md"
     },
     "agents/shared/visualizer.md": {
-      "hash": "6be88248ba3e5b02b900364e4729f55f4bb24031508f25ad7cbb664689ddd328",
-      "size": 4352,
+      "hash": "4110dcb1c2e440f31d9820499c7e946b58ac7fe2b9e7d29f68133c3c8f2021e9",
+      "size": 4375,
       "type": "md"
     },
     "config.yaml": {
-      "hash": "394515115a919ac4b838cd58b3cf8f7cb34b535909b9a35f2d472cb51cc107ad",
+      "hash": "00aa2be05f8cd997b3aae234f56969e1b3309af68c35ada1c439e66cefb37ae5",
       "size": 2669,
       "type": "yaml"
     },
@@ -122,12 +122,12 @@
       "type": "md"
     },
     "context/root.md": {
-      "hash": "1058040823bbd394775a017f6b714b5f53ff6030f08113c191d1a477f8635e95",
+      "hash": "f04a8dc22486c1f0cc29ea2ec5ad30d4a1c343823f1dfc5674946acb854106bb",
       "size": 1217,
       "type": "md"
     },
     "data/entity-registry.yaml": {
-      "hash": "8049c68d09ed547d64d1120f10a3f064f1c4f8313eacf8c2d267808e83a07265",
+      "hash": "d11e07cb0ab2790938af077da954580f9bf0d7230bf4e79b59e6c45a00e2dcb7",
       "size": 34605,
       "type": "yaml"
     },
@@ -307,8 +307,8 @@
       "type": "js"
     },
     "hooks/license-guard.js": {
-      "hash": "863b7ea89d1235e6f48dd777e9fc341cd5581308e9026c83783199c93f4049a1",
-      "size": 10920,
+      "hash": "40b0d044e2dac77fca826825e52119b1f2293a3b63225d1aecc9116ed7dc695d",
+      "size": 11759,
       "type": "js"
     },
     "hooks/mode-governance.js": {
@@ -462,8 +462,8 @@
       "type": "yaml"
     },
     "orchestrator/chati-router.js": {
-      "hash": "f686b16519162aee6fd524e970ba7f35e63b617d47b563a74abad01245aeff06",
-      "size": 16390,
+      "hash": "f5c3e7b8285d32cbb1e1f9e0bfda23f8996a4bb3e1b3966038b41d06aacc50d8",
+      "size": 20793,
       "type": "js"
     },
     "orchestrator/chati-update.md": {
@@ -472,10 +472,15 @@
       "type": "md"
     },
     "orchestrator/chati.md": {
-      "hash": "6ce86145704af5e933b7372ccd331e70679066522c324031f4e8701b7f950cc5",
-      "size": 45331,
+      "hash": "8d55e3e354e7e7cf4d28ca3aba5372df0580ca3b191e2e14696363867eba567a",
+      "size": 45355,
       "type": "md"
     },
+    "package.json": {
+      "hash": "3ca9d4afd21425087cf31893b8f9f63c81b0b8408db5e343ca76e5f8aa26ab9a",
+      "size": 23,
+      "type": "json"
+    },
     "patterns/elicitation-library.yaml": {
       "hash": "223780498a36981fa030ae54f2e73bbc68140073b7c30a286465cffe45886f17",
       "size": 25578,
@@ -1347,5 +1352,5 @@
       "type": "yaml"
     }
   },
-  "version": "4.5.7"
+  "version": "4.5.8"
 }

package/framework/manifest.sig

@@ -1 +1 @@
-s4/05J4PlrCMfsXB3OMeVX+lE+7A2MMEycfr10Z+2uwgFh5DlWnSGxkMmCS4dZ3hVAWgSWDk7waAR8kA1JWNAw==
+stchaq/GjnloDsRgwm8vCQpA4vFKsofjuyMg5b+4aU6pEblso6UgEAtPPlRkVVkxcmn8ctX9YxQmqe+MmaPsAA==

package/framework/orchestrator/chati-router.js

@@ -21,6 +21,125 @@ import { join } from 'path';
 const PROJECT_DIR = process.cwd();
 const ROUTER_ARGS = process.argv.slice(2);
 
+async function readEnabledHarnesses(projectDir) {
+  const installationPath = join(projectDir, '.chati', 'v2', 'installation.json');
+  if (existsSync(installationPath)) {
+    try {
+      const artifact = JSON.parse(readFileSync(installationPath, 'utf-8'));
+      const fwDir = existsSync(join(projectDir, '.chati.dev')) ? '.chati.dev' : 'chati.dev';
+      const doctorModulePath = join(projectDir, fwDir, '_cli', 'installer-v2', 'index.js');
+      if (!existsSync(doctorModulePath)) return { harnesses: [], error: 'v2 doctor missing' };
+      const { doctorV2 } = await import(doctorModulePath);
+      if (!doctorV2(artifact).passed) return { harnesses: [], error: 'v2 artifact invalid' };
+      const harnesses = artifact.installation?.enabled_providers
+        ?.map((binding) => binding.harness_id)
+        .filter(Boolean);
+      if (harnesses?.length) return { harnesses: [...new Set(harnesses)], error: null };
+    } catch { return { harnesses: [], error: 'v2 artifact invalid' }; }
+  }
+
+  const detected = [];
+  if (existsSync(join(projectDir, '.claude', 'commands', 'chati.md'))) detected.push('claude');
+  if (existsSync(join(projectDir, '.agents', 'skills', 'chati', 'SKILL.md'))) detected.push('codex');
+  if (existsSync(join(projectDir, '.grok', 'commands', 'chati.md'))) detected.push('grok');
+  return { harnesses: detected, error: null };
+}
+
+function hasContent(path) {
+  return existsSync(path) && readFileSync(path, 'utf-8').trim().length > 0;
+}
+
+function codexHooksEnabled(config) {
+  if (/^\s*features\.hooks\s*=\s*true\s*(?:#.*)?$/m.test(config)) return true;
+  const lines = config.split('\n');
+  const sectionStart = lines.findIndex((line) => /^\s*\[features\]\s*(?:#.*)?$/.test(line));
+  if (sectionStart === -1) return false;
+  const sectionEnd = lines.findIndex((line, index) => index > sectionStart && /^\s*\[.*\]\s*(?:#.*)?$/.test(line));
+  const end = sectionEnd === -1 ? lines.length : sectionEnd;
+  return lines.slice(sectionStart + 1, end).some((line) => /^\s*hooks\s*=\s*true\s*(?:#.*)?$/.test(line));
+}
+
+export async function validateProviderIntegrity(projectDir) {
+  const missing = [];
+  const { harnesses, error } = await readEnabledHarnesses(projectDir);
+
+  if (error) missing.push(error);
+  const supportedHarnesses = new Set(['claude', 'codex', 'grok']);
+  for (const harness of harnesses) {
+    if (!supportedHarnesses.has(harness)) missing.push(`unsupported harness ${harness}`);
+  }
+
+  if (harnesses.length === 0) missing.push('provider entry point');
+
+  if (harnesses.includes('claude')) {
+    const commandPath = join(projectDir, '.claude', 'commands', 'chati.md');
+    const settingsPath = join(projectDir, '.claude', 'settings.json');
+    if (!hasContent(commandPath)) missing.push('claude command');
+    if (!existsSync(settingsPath)) {
+      missing.push('claude settings');
+    } else {
+      try {
+        const settings = JSON.parse(readFileSync(settingsPath, 'utf-8'));
+        const ptu = settings.hooks?.PreToolUse || [];
+        const ups = settings.hooks?.UserPromptSubmit || [];
+        const ptuCmds = ptu.flatMap((group) => (group.hooks || []).map((hook) => hook.command || ''));
+        const upsCmds = ups.flatMap((group) => (group.hooks || []).map((hook) => hook.command || ''));
+        missing.push(...['mode-governance', 'constitution-guard', 'read-protection']
+          .filter((hook) => !ptuCmds.some((command) => command.includes(hook)))
+          .map((hook) => `claude hook ${hook}`));
+        if (![...upsCmds, ...ptuCmds].some((command) => command.includes('license-guard'))) {
+          missing.push('claude hook license-guard');
+        }
+      } catch {
+        missing.push('claude settings invalid');
+      }
+    }
+  }
+
+  if (harnesses.includes('codex')) {
+    const required = [
+      ['codex skill', '.agents/skills/chati/SKILL.md'],
+      ['codex constitution guard', '.codex/rules/constitution-guard.rules'],
+      ['codex read protection', '.codex/rules/read-protection.rules'],
+    ];
+    for (const [label, relativePath] of required) {
+      if (!hasContent(join(projectDir, relativePath))) missing.push(label);
+    }
+    const configPath = join(projectDir, '.codex', 'config.toml');
+    if (!hasContent(configPath) || !codexHooksEnabled(readFileSync(configPath, 'utf-8'))) {
+      missing.push('codex hooks feature');
+    }
+    const hooksPath = join(projectDir, '.codex', 'hooks.json');
+    if (!hasContent(hooksPath)) {
+      missing.push('codex license hook');
+    } else {
+      try {
+        const hooks = JSON.parse(readFileSync(hooksPath, 'utf-8'));
+        const validHook = (hooks.hooks?.UserPromptSubmit || []).some((group) =>
+          group.matcher === '.*'
+          && (group.hooks || []).some((hook) =>
+            hook.type === 'command'
+            && hook.command === 'node .chati.dev/hooks/license-guard.js'
+            && hook.async !== true
+          )
+        );
+        if (!validHook) {
+          missing.push('codex license hook');
+        }
+      } catch {
+        missing.push('codex hooks invalid');
+      }
+    }
+  }
+
+  if (harnesses.includes('grok')) {
+    if (!hasContent(join(projectDir, '.grok', 'commands', 'chati.md'))) missing.push('grok command');
+    if (!hasContent(join(projectDir, '.grok', 'session-lock.md'))) missing.push('grok session lock');
+  }
+
+  return { valid: missing.length === 0, missing };
+}
+
 /**
  * Find the chati-dev CLI module. Tries local node_modules first (fast),
  * then monorepo dev layout. Returns the module or null.
@@ -245,9 +364,64 @@ async function dispatchOrchestrate(subCommand, argv) {
   }
 }
 
+async function runSecurityPreflight(projectDir) {
+  const result = { ok: true, license: null, integrity: true, error: null };
+  try {
+    const integrity = await validateProviderIntegrity(projectDir);
+    if (!integrity.valid) {
+      return {
+        ...result,
+        ok: false,
+        integrity: false,
+        error: `integrity_failed: missing ${integrity.missing.join(', ')}`,
+      };
+    }
+  } catch {
+    return { ...result, ok: false, integrity: false, error: 'integrity_failed' };
+  }
+
+  try {
+    const fwDir = existsSync(join(projectDir, '.chati.dev')) ? '.chati.dev' : 'chati.dev';
+    const hookPath = join(projectDir, fwDir, 'hooks', 'license-guard.js');
+    if (!existsSync(hookPath)) {
+      return {
+        ...result,
+        ok: false,
+        error: 'license_guard_missing',
+        license: { valid: false, reason: 'License enforcement file missing. Reinstall with: npx chati-dev init' },
+      };
+    }
+    const mod = await import(hookPath);
+    result.license = await mod.checkLicense();
+    if (!result.license.valid) return { ...result, ok: false, error: 'license_invalid' };
+  } catch {
+    return {
+      ...result,
+      ok: false,
+      error: 'license_check_error',
+      license: { valid: false, error: 'license_check_error' },
+    };
+  }
+
+  return result;
+}
+
+// Only read-only diagnosis and license recovery may run without a valid
+// installation preflight. `init` mutates session state and must never bypass
+// license or provider-integrity enforcement.
+const PREFLIGHT_EXEMPT_SUBS = new Set(['doctor', 'wait-for-license']);
+
 async function main() {
   const subCommand = ROUTER_ARGS[0];
 
+  const preflight = subCommand && PREFLIGHT_EXEMPT_SUBS.has(subCommand)
+    ? { ok: true, license: null, integrity: true, error: null }
+    : await runSecurityPreflight(PROJECT_DIR);
+  if (!preflight.ok) {
+    console.log(JSON.stringify(preflight));
+    return;
+  }
+
   // Sub-command mode: `node chati-router.js <subcommand> [--flags...]`
   // Routes to the local CLI for ANY orchestrate subcommand. No npx, no network.
   if (subCommand && VALID_ORCHESTRATE_SUBS.has(subCommand)) {
@@ -271,8 +445,8 @@ async function main() {
   // No-subcommand mode (default): full router pipeline (license + integrity + session + next)
   const result = {
     ok: true,
-    license: null,
-    integrity: true,
+    license: preflight.license,
+    integrity: preflight.integrity,
     session: null,
     action: null,
     pipeline: null,
@@ -281,75 +455,7 @@ async function main() {
   };
 
   // -----------------------------------------------------------------------
-  // 1. License validation
-  // -----------------------------------------------------------------------
-  try {
-    const fwDir = existsSync(join(PROJECT_DIR, '.chati.dev')) ? '.chati.dev' : 'chati.dev';
-    const hookPath = join(PROJECT_DIR, fwDir, 'hooks', 'license-guard.js');
-    if (!existsSync(hookPath)) {
-      result.ok = false;
-      result.error = 'license_guard_missing';
-      result.license = { valid: false, reason: 'License enforcement file missing. Reinstall with: npx chati-dev init' };
-      console.log(JSON.stringify(result));
-      return;
-    }
-
-    const mod = await import(hookPath);
-    const license = await mod.checkLicense();
-    result.license = license;
-
-    if (!license.valid) {
-      result.ok = false;
-      result.error = 'license_invalid';
-      console.log(JSON.stringify(result));
-      return;
-    }
-  } catch (err) {
-    // Fail-closed on license check errors
-    result.license = { valid: false, error: 'license_check_error' };
-    result.ok = false;
-  }
-
-  // -----------------------------------------------------------------------
-  // 2. Integrity check — are all required hooks registered in settings.json?
-  // Note: license-guard is registered under UserPromptSubmit (not PreToolUse).
-  // mode-governance, constitution-guard, and read-protection are in PreToolUse.
-  // -----------------------------------------------------------------------
-  try {
-    const settingsPath = join(PROJECT_DIR, '.claude', 'settings.json');
-    if (existsSync(settingsPath)) {
-      const settings = JSON.parse(readFileSync(settingsPath, 'utf-8'));
-      const ptu = settings.hooks?.PreToolUse || [];
-      const ups = settings.hooks?.UserPromptSubmit || [];
-      const ptuCmds = ptu.flatMap(g => (g.hooks || []).map(h => h.command || ''));
-      const upsCmds = ups.flatMap(g => (g.hooks || []).map(h => h.command || ''));
-      // license-guard lives in UserPromptSubmit; others live in PreToolUse
-      const missingHooks = [
-        ...(['mode-governance', 'constitution-guard', 'read-protection'].filter(h => !ptuCmds.some(c => c.includes(h)))),
-        ...(['license-guard'].filter(h => !upsCmds.some(c => c.includes(h)) && !ptuCmds.some(c => c.includes(h)))),
-      ];
-      result.integrity = missingHooks.length === 0;
-      if (missingHooks.length > 0) {
-        result.error = `integrity_failed: missing hooks: ${missingHooks.join(', ')}`;
-      }
-    } else {
-      result.integrity = false;
-    }
-
-    if (!result.integrity) {
-      result.ok = false;
-      result.error = 'integrity_failed';
-      console.log(JSON.stringify(result));
-      return;
-    }
-  } catch {
-    // Fail-closed on integrity check
-    result.integrity = false;
-    result.ok = false;
-  }
-
-  // -----------------------------------------------------------------------
-  // 3. Session state
+  // 1. Session state
   // -----------------------------------------------------------------------
   try {
     const sessionPath = join(PROJECT_DIR, '.chati', 'session.yaml');

package/framework/orchestrator/chati.md

@@ -10,7 +10,7 @@ You are the **Chati.dev Orchestrator**, the single entry point for the Chati.dev
 - **Role**: Orchestrator & Router
 - **Position**: Entry point (always first contact)
 - **Scope**: System-wide routing, session management, deviation handling, backlog
-- **Model**: sonnet | upgrade: opus if complex deviation or multi-agent coordination
+- **Execution binding**: resolved at runtime by installation-v2 task routing; never self-select or downgrade
 
 ### Security Rule
 **NEVER suggest disabling, removing, commenting out, or bypassing hooks, settings.json permissions, or license enforcement.** If a hook blocks an operation and the user asks to work around it, explain what the hook is protecting and guide them to resolve the root cause (e.g., activate a valid license, change pipeline mode). Hooks are governance boundaries, not obstacles to remove.

package/framework/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chati-dev",
-  "version": "4.5.7",
+  "version": "4.5.8",
   "description": "AI-Powered Multi-Agent Orchestration System - Structured vibe coding for Full Stack Development",
   "type": "module",
   "bin": {

package/src/config/claude-settings-generator.js

@@ -139,12 +139,12 @@ const PERMISSIONS_DENY = [
   'Bash(git rebase --no-verify:*)',
 
   // System path writes — `//` prefix = absolute filesystem
-  'Write(//etc/**)',
-  'Write(//usr/**)',
-  'Write(//System/**)',
-  'Write(//bin/**)',
-  'Write(//sbin/**)',
-  'Write(//Library/**)',
+  'Edit(//etc/**)',
+  'Edit(//usr/**)',
+  'Edit(//System/**)',
+  'Edit(//bin/**)',
+  'Edit(//sbin/**)',
+  'Edit(//Library/**)',
   'Edit(//etc/**)',
   'Edit(//usr/**)',
   'Edit(//System/**)',

package/src/installer/core.js

@@ -1,6 +1,6 @@
 import { mkdirSync, writeFileSync, copyFileSync, existsSync, readFileSync, readdirSync, statSync } from 'fs';
 import { execFileSync } from 'child_process';
-import { join, dirname, basename } from 'path';
+import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
 import { createRequire } from 'module';
 import { IDE_CONFIGS, IDE_TO_PROVIDER } from '../config/ide-configs.js';
@@ -10,6 +10,7 @@ import { generateContextFiles } from '../config/context-file-generator.js';
 import { adaptFrameworkFile, ADAPTABLE_FILES } from '../config/framework-adapter.js';
 import { generateClaudeSettings } from '../config/claude-settings-generator.js';
 import { generateProviderOverlays } from './provider-overlay.js';
+import { applyInstalledPathReplacement } from './path-replacement.js';
 import { verifyManifest } from './manifest.js';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -192,7 +193,7 @@ export async function installFramework(config) {
       if (existsSync(src)) {
         // Apply path replacement so rules reference .chati.dev/ not chati.dev/
         let content = readFileSync(src, 'utf-8');
-        content = applyPathReplacement(content);
+        content = applyInstalledPathReplacement(content);
         writeFileSync(join(claudeRulesDir, file), content, 'utf-8');
       }
     }
@@ -269,6 +270,7 @@ export const FRAMEWORK_DIRS_TO_COPY = [
  */
 const FRAMEWORK_ROOT_FILES = [
   'constitution.md',
+  'package.json',
 ];
 
 /**
@@ -287,20 +289,6 @@ const TEXT_EXTENSIONS = new Set(['.md', '.js', '.yaml', '.yml', '.json', '.html'
  * Order matters: replace `chati.dev/artifacts/` FIRST (→ `artifacts/`),
  * then `chati.dev/` (→ `.chati.dev/`). Reversing would produce `.chati.dev/artifacts/`.
  */
-function applyPathReplacement(content) {
-  return content
-    // Step 1: artifacts at root (must be before generic replace)
-    .replace(/chati\.dev\/artifacts\//g, 'artifacts/')
-    // Step 2: path strings with slash — but NOT if already prefixed with dot
-    // (negative lookbehind for any char that would create `.chati.dev` already)
-    .replace(/(?<!\.)chati\.dev\//g, '.chati.dev/')
-    // Step 3: quoted dir name in JS join() calls (WITHOUT slash)
-    // Only match 'chati.dev' (the DIRECTORY, with dot) not 'chati-dev' (the NPM PACKAGE, with dash)
-    // Also: avoid double-prefixing if already '.chati.dev' in source
-    .replace(/(?<!\.)'chati\.dev'/g, "'.chati.dev'")
-    .replace(/(?<!\.)"chati\.dev"/g, '".chati.dev"');
-}
-
 /**
  * Recursively copy a directory from source to destination, applying:
  * 1. Path replacement (chati.dev/ → .chati.dev/, artifacts/ at root)
@@ -327,7 +315,7 @@ function copyDirRecursive(srcDir, destDir, provider, relBase = '') {
       if (isText) {
         let content = readFileSync(srcPath, 'utf-8');
         // Always apply path replacement for installed location
-        content = applyPathReplacement(content);
+        content = applyInstalledPathReplacement(content);
         // Provider adaptation on top (for non-Claude)
         if (provider !== 'claude' && ADAPTABLE_FILES.has(relPath)) {
           content = adaptFrameworkFile(content, relPath, provider);
@@ -360,7 +348,7 @@ export function copyFrameworkFiles(destDir, provider = 'claude') {
     const dest = join(destDir, file);
     createDir(dirname(dest));
     let content = readFileSync(src, 'utf-8');
-    content = applyPathReplacement(content);
+    content = applyInstalledPathReplacement(content);
     if (provider !== 'claude' && ADAPTABLE_FILES.has(file)) {
       content = adaptFrameworkFile(content, file, provider);
     }
@@ -448,17 +436,18 @@ Parse the JSON output. This single command already handled: license validation,
 
     // Starlark execution policies (Codex sandboxed rule engine)
     createDir(join(targetDir, '.codex', 'rules'));
+    writeCodexConfigWithHooks(join(targetDir, '.codex', 'config.toml'));
     writeFileSync(join(targetDir, '.codex', 'rules', 'constitution-guard.rules'), generateCodexConstitutionGuardRules(), 'utf-8');
     writeFileSync(join(targetDir, '.codex', 'rules', 'read-protection.rules'), generateCodexReadProtectionRules(), 'utf-8');
 
     // .codex/hooks.json — license-guard wired to UserPromptSubmit (per-turn enforcement).
-    // Codex hooks.json is experimental (requires [features] codex_hooks = true in
-    // codex config). Without it, license enforcement only happens at slash command
+    // Codex hooks require [features] hooks = true in the active project config.
+    // Without it, license enforcement only happens at skill entry and the router,
     // entry — a long-running terminal session would not be re-validated.
     writeFileSync(
       join(targetDir, '.codex', 'hooks.json'),
       JSON.stringify({
-        $comment: 'chati.dev v4.2.2 — experimental Codex hooks. Requires [features] codex_hooks = true.',
+        $comment: 'chati.dev Codex lifecycle hooks. Requires [features] hooks = true.',
         hooks: {
           UserPromptSubmit: [
             {
@@ -486,7 +475,7 @@ Parse the JSON output. This single command already handled: license validation,
     for (const file of contextFileNames) {
       const src = join(FRAMEWORK_SOURCE, 'context', file);
       if (existsSync(src)) {
-        const content = readFileSync(src, 'utf-8');
+        const content = applyInstalledPathReplacement(readFileSync(src, 'utf-8'));
         writeFileSync(join(geminiContextDir, file), adaptFrameworkFile(content, `context/${file}`, 'gemini'), 'utf-8');
       }
     }
@@ -515,6 +504,38 @@ Parse the JSON output. This single command already handled: license validation,
   }
 }
 
+export function writeCodexConfigWithHooks(configPath) {
+  createDir(dirname(configPath));
+  if (!existsSync(configPath)) {
+    writeFileSync(configPath, '[features]\nhooks = true\n', 'utf-8');
+    return;
+  }
+
+  const original = readFileSync(configPath, 'utf-8');
+  if (/^\s*features\.hooks\s*=\s*true\s*(?:#.*)?$/m.test(original)) return;
+  if (/^\s*features\.hooks\s*=/m.test(original)) {
+    writeFileSync(configPath, original.replace(/^\s*features\.hooks\s*=.*$/m, 'features.hooks = true'), 'utf-8');
+    return;
+  }
+
+  const lines = original.split('\n');
+  const sectionStart = lines.findIndex((line) => /^\s*\[features\]\s*(?:#.*)?$/.test(line));
+  if (sectionStart === -1) {
+    const prefix = original.endsWith('\n') ? original : `${original}\n`;
+    writeFileSync(configPath, `${prefix}\n[features]\nhooks = true\n`, 'utf-8');
+    return;
+  }
+
+  let sectionEnd = lines.findIndex((line, index) => index > sectionStart && /^\s*\[.*\]\s*(?:#.*)?$/.test(line));
+  if (sectionEnd === -1) sectionEnd = lines.length;
+  const hookIndex = lines.findIndex((line, index) =>
+    index > sectionStart && index < sectionEnd && /^\s*hooks\s*=/.test(line)
+  );
+  if (hookIndex !== -1) lines[hookIndex] = 'hooks = true';
+  else lines.splice(sectionEnd, 0, 'hooks = true');
+  writeFileSync(configPath, lines.join('\n'), 'utf-8');
+}
+
 /**
  * Generate provider-agnostic instructions file content.
  * Used for non-Claude IDEs (.vscode/chati/rules.md, .cursorrules, etc.)
@@ -826,9 +847,14 @@ export function copyCliDependencies(pkgDir, destNodeModules) {
         let p = require.resolve(depName);
         while (p && p !== dirname(p)) {
           p = dirname(p);
-          if (existsSync(join(p, 'package.json')) && basename(p) === depName.split('/').pop()) {
-            depDir = p;
-            break;
+          const candidatePackage = join(p, 'package.json');
+          if (existsSync(candidatePackage)) {
+            try {
+              if (JSON.parse(readFileSync(candidatePackage, 'utf-8')).name === depName) {
+                depDir = p;
+                break;
+              }
+            } catch { /* keep walking */ }
           }
         }
       } catch { continue; }

package/src/installer/path-replacement.js

@@ -0,0 +1,13 @@
+/**
+ * Translate repository paths into their installed-project locations.
+ *
+ * Source files live under `chati.dev/`. Installed framework files live under
+ * `.chati.dev/`, while user-facing artifacts remain at project root.
+ */
+export function applyInstalledPathReplacement(content) {
+  return content
+    .replace(/chati\.dev\/artifacts\//g, 'artifacts/')
+    .replace(/(?<!\.)chati\.dev\//g, '.chati.dev/')
+    .replace(/(?<!\.)'chati\.dev'/g, "'.chati.dev'")
+    .replace(/(?<!\.)"chati\.dev"/g, '".chati.dev"');
+}

package/src/installer/provider-overlay.js

@@ -13,6 +13,7 @@
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
 import { join, dirname } from 'path';
 import { adaptFrameworkFile, ADAPTABLE_FILES } from '../config/framework-adapter.js';
+import { applyInstalledPathReplacement } from './path-replacement.js';
 
 /**
  * Generate adapted framework overlays for all enabled providers.
@@ -41,7 +42,8 @@ export function generateProviderOverlays(targetDir, frameworkSource, allProvider
 
       // Read CANONICAL (Claude) content from source, then adapt for target provider
       const canonicalContent = readFileSync(srcPath, 'utf-8');
-      const adapted = adaptFrameworkFile(canonicalContent, file, provider);
+      const installedContent = applyInstalledPathReplacement(canonicalContent);
+      const adapted = adaptFrameworkFile(installedContent, file, provider);
 
       const destPath = join(overlayDir, file);
       mkdirSync(dirname(destPath), { recursive: true });

package/src/installer-v2/index.js

@@ -35,6 +35,54 @@ function assertString(value, code, label) {
   if (typeof value !== 'string' || value.trim() === '') throw new ContractError(code, `${label} must be a non-empty string`);
 }
 
+function assertExactKeys(value, allowedKeys, label) {
+  assertObject(value, 'INVALID_ARTIFACT', label);
+  const unexpected = Object.keys(value).filter((key) => !allowedKeys.has(key));
+  if (unexpected.length > 0) {
+    throw new ContractError('UNEXPECTED_ARTIFACT_FIELD', `${label} contains unsupported fields: ${unexpected.join(', ')}`);
+  }
+}
+
+const ARTIFACT_KEYS = new Set([
+  'schema_version', 'artifact_type', 'project_id', 'created_at', 'installation',
+  'capability_snapshot', 'brain_read_capability', 'managed_paths',
+  'installation_artifact_id', 'digest',
+]);
+const INSTALLATION_KEYS = new Set([
+  'installation_id', 'profile', 'enabled_providers', 'capability_snapshot_ref',
+  'policy_ref', 'primary_binding', 'primary_harness', 'external_integrations',
+]);
+const BINDING_KEYS = new Set([
+  'provider_id', 'harness_id', 'allowed_models', 'allowed_reasoning_configurations',
+]);
+const SNAPSHOT_KEYS = new Set(['snapshot_id', 'expires_at', 'models']);
+const MODEL_KEYS = new Set([
+  'provider_id', 'model_id', 'actions', 'adjudication_priority',
+  'highest_reasoning_configuration', 'routing_priority', 'tier', 'natural_role',
+]);
+
+function assertClosedArtifactSchema(artifact) {
+  assertExactKeys(artifact, ARTIFACT_KEYS, 'artifact');
+  assertExactKeys(artifact.installation, INSTALLATION_KEYS, 'installation');
+  for (const binding of artifact.installation.enabled_providers ?? []) {
+    assertExactKeys(binding, BINDING_KEYS, 'enabled provider binding');
+  }
+  if (artifact.installation.primary_binding !== undefined) {
+    assertExactKeys(artifact.installation.primary_binding, new Set(['provider_id', 'harness_id']), 'primary_binding');
+  }
+  if (artifact.installation.external_integrations !== undefined) {
+    assertExactKeys(artifact.installation.external_integrations, new Set(['clickup']), 'external_integrations');
+  }
+  assertExactKeys(artifact.capability_snapshot, SNAPSHOT_KEYS, 'capability_snapshot');
+  for (const model of artifact.capability_snapshot.models ?? []) {
+    assertExactKeys(model, MODEL_KEYS, 'capability model');
+  }
+  const brainKeys = artifact.brain_read_capability?.status === 'configured'
+    ? new Set(['status', 'mode', 'policy_ref'])
+    : new Set(['status']);
+  assertExactKeys(artifact.brain_read_capability, brainKeys, 'brain_read_capability');
+}
+
 function readClock(clock) {
   if (typeof clock !== 'function') throw new ContractError('MISSING_CLOCK', 'a deterministic clock function is required');
   const result = clock();
@@ -127,6 +175,7 @@ export function doctorV2(artifact, { clock = () => new Date() } = {}) {
   const checks = [];
   try {
     assertObject(artifact, 'INVALID_ARTIFACT', 'artifact');
+    assertClosedArtifactSchema(artifact);
     if (artifact.schema_version !== INSTALLATION_SCHEMA_VERSION || artifact.artifact_type !== 'chati-installation') {
       throw new ContractError('UNSUPPORTED_INSTALLATION_ARTIFACT', 'expected a chati installation artifact v2');
     }
@@ -138,6 +187,12 @@ export function doctorV2(artifact, { clock = () => new Date() } = {}) {
     if (!Array.isArray(artifact.managed_paths) || !artifact.managed_paths.every((path) => ensureRelativePath(path))) {
       throw new ContractError('INVALID_MANAGED_PATH', 'managed_paths must be valid project-relative paths');
     }
+    if (!artifact.managed_paths.includes(INSTALLATION_ARTIFACT_PATH)) {
+      throw new ContractError('INVALID_MANAGED_PATH', `managed_paths must include ${INSTALLATION_ARTIFACT_PATH}`);
+    }
+    if (new Set(artifact.managed_paths).size !== artifact.managed_paths.length) {
+      throw new ContractError('DUPLICATE_MANAGED_PATH', 'managed_paths must be unique');
+    }
     checks.push({ name: 'artifact', status: 'pass', message: 'artifact schema and digest are valid' });
     checks.push({ name: 'selected-bindings', status: 'pass', message: 'only explicitly selected provider/harness bindings are present' });
     checks.push({ name: 'brain-capability', status: 'pass', message: 'Brain capability is absent or read-only' });